orionfold-relay 0.25.1 → 0.26.0

package/dist/cli.js

@@ -1186,7 +1186,7 @@ var CURRENT_PLUGIN_API_VERSION, CAPABILITY_VALUES, ORIGIN_VALUES, PrimitivesBund
 var init_types = __esm({
   "src/lib/plugins/sdk/types.ts"() {
     "use strict";
-    CURRENT_PLUGIN_API_VERSION = "0.25";
+    CURRENT_PLUGIN_API_VERSION = "0.26";
     CAPABILITY_VALUES = ["fs", "net", "child_process", "env"];
     ORIGIN_VALUES = ["ainative-internal", "third-party"];
     PrimitivesBundleManifestSchema = z.object({
@@ -12982,7 +12982,7 @@ var init_registry6 = __esm({
     init_registry5();
     init_installer();
     init_schedule_spec();
-    SUPPORTED_API_VERSIONS = /* @__PURE__ */ new Set([CURRENT_PLUGIN_API_VERSION, "0.24"]);
+    SUPPORTED_API_VERSIONS = /* @__PURE__ */ new Set([CURRENT_PLUGIN_API_VERSION, "0.25"]);
     pluginCache = null;
     lastLoadedPluginIds = /* @__PURE__ */ new Set();
     PluginTableSchema = z16.object({
@@ -25913,8 +25913,8 @@ import { execFileSync as execFileSync3 } from "child_process";
 import yaml12 from "js-yaml";
 import semver from "semver";
 function relayCoreVersion() {
-  if (semver.valid("0.25.1")) {
-    return "0.25.1";
+  if (semver.valid("0.26.0")) {
+    return "0.26.0";
   }
   try {
     const root = getAppRoot(import.meta.dirname, 3);
@@ -26092,6 +26092,11 @@ async function installPack(source, options = {}) {
       const { reloadBlueprints: reloadBlueprints2 } = await Promise.resolve().then(() => (init_registry3(), registry_exports3));
       reloadBlueprints2();
     }
+    try {
+      const { revalidateTag } = await import("next/cache");
+      revalidateTag(`app-runtime:${pack.meta.id}`, { expire: 0 });
+    } catch {
+    }
     return {
       packId: pack.meta.id,
       packVersion: pack.meta.version,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orionfold-relay",
-  "version": "0.25.1",
+  "version": "0.26.0",
   "description": "Orionfold Relay — a local-first, multi-agent orchestration runtime and builder scaffold for AI-native work.",
   "keywords": [
     "ai",

package/src/app/api/data/clear/route.ts

@@ -4,7 +4,14 @@ import { isDataOpsAllowed } from "@/lib/data/staging-gate";
 
 export async function POST() {
   if (!isDataOpsAllowed()) {
-    return NextResponse.json(null, { status: 404 });
+    return NextResponse.json(
+      {
+        success: false,
+        error:
+          "Clearing data is a staging-only tool and is disabled on this build.",
+      },
+      { status: 403 }
+    );
   }
 
   try {

package/src/app/api/data/seed/route.ts

@@ -4,7 +4,14 @@ import { isDataOpsAllowed } from "@/lib/data/staging-gate";
 
 export async function POST() {
   if (!isDataOpsAllowed()) {
-    return NextResponse.json(null, { status: 404 });
+    return NextResponse.json(
+      {
+        success: false,
+        error:
+          "Sample data seeding is a staging-only tool and is disabled on this build.",
+      },
+      { status: 403 }
+    );
   }
 
   try {

package/src/app/settings/page.tsx

@@ -14,10 +14,12 @@ import { ChannelsSection } from "@/components/settings/channels-section";
 import { InstanceSection } from "@/components/instance/instance-section";
 import { LicenseSection } from "@/components/settings/license-section";
 import { PageShell } from "@/components/shared/page-shell";
+import { isDataOpsAllowed } from "@/lib/data/staging-gate";
 
 export const dynamic = "force-dynamic";
 
 export default function SettingsPage() {
+  const dataOpsAllowed = isDataOpsAllowed();
   return (
     <PageShell
       title="Settings"
@@ -38,7 +40,7 @@ export default function SettingsPage() {
         <BudgetGuardrailsSection />
         <PermissionsSections />
         <DatabaseSnapshotsSection />
-        <DataManagementSection />
+        <DataManagementSection allowed={dataOpsAllowed} />
       </div>
     </PageShell>
   );

package/src/components/apps/kit-view/slots/header.tsx

@@ -22,8 +22,8 @@ interface HeaderSlotProps {
 export function HeaderSlotView({ slot, manifestPane }: HeaderSlotProps) {
   const { title, description, status, actions, cadenceChip, runNowBlueprintId, runNowVariables, periodChip, triggerSourceChip } = slot;
   return (
-    <div className="flex flex-col gap-1 sm:flex-row sm:items-center sm:justify-between sm:gap-4">
-      <div className="min-w-0 flex-1">
+    <div className="flex flex-col gap-2 sm:flex-row sm:flex-wrap sm:items-center sm:justify-between sm:gap-x-4 sm:gap-y-2">
+      <div className="min-w-0 flex-1 sm:min-w-[16rem]">
         <h1 className="text-xl font-semibold tracking-tight line-clamp-2" title={title}>
           {title}
         </h1>
@@ -33,7 +33,13 @@ export function HeaderSlotView({ slot, manifestPane }: HeaderSlotProps) {
           </p>
         )}
       </div>
-      <div className="flex flex-wrap items-center gap-2 mt-2 sm:mt-0 sm:flex-nowrap sm:shrink-0">
+      {/*
+       * Action group stays a single non-wrapping row (chips + Run + manifest
+       * never split across lines). When the title can't yield enough inline
+       * space, the PARENT's flex-wrap drops this whole group to its own row —
+       * an intentional stack, not an accidental two-line break (FEAT-4).
+       */}
+      <div className="flex flex-nowrap items-center gap-2 sm:shrink-0">
         {status && <StatusChip status={status} size="md" />}
         {cadenceChip && (
           <ScheduleCadenceChip

package/src/components/apps/run-now-button.tsx

@@ -5,6 +5,7 @@ import { Button } from "@/components/ui/button";
 import { Play } from "lucide-react";
 import { toast } from "sonner";
 import { RunNowSheet } from "./run-now-sheet";
+import { toastDraftCreated } from "./run-now-toast";
 import type { BlueprintVariable } from "@/lib/workflows/blueprints/types";
 
 interface RunNowButtonProps {
@@ -63,12 +64,15 @@ export function RunNowButton({
       });
       if (!res.ok) {
         const err = (await res.json().catch(() => ({}))) as { error?: string };
-        toast.error(err.error ?? `Failed to start (${res.status})`);
+        toast.error(err.error ?? `Failed to create draft (${res.status})`);
         return;
       }
-      toast.success("Run started");
+      const body = (await res.json().catch(() => ({}))) as {
+        workflowId?: string;
+      };
+      toastDraftCreated(body.workflowId);
     } catch (err) {
-      toast.error(err instanceof Error ? err.message : "Run failed");
+      toast.error(err instanceof Error ? err.message : "Could not create draft");
     } finally {
       setPending(false);
     }

package/src/components/apps/run-now-sheet.tsx

@@ -13,6 +13,7 @@ import {
 } from "@/components/ui/sheet";
 import { VariableInput } from "@/components/workflows/variable-input";
 import { validateVariables } from "@/lib/workflows/blueprints/validate-variables";
+import { toastDraftCreated } from "./run-now-toast";
 import type { BlueprintVariable } from "@/lib/workflows/blueprints/types";
 
 interface RunNowSheetProps {
@@ -74,10 +75,13 @@ export function RunNowSheet({
         }
         return;
       }
-      toast.success("Run started");
+      const body = (await res.json().catch(() => ({}))) as {
+        workflowId?: string;
+      };
+      toastDraftCreated(body.workflowId);
       setOpen(false);
     } catch (err) {
-      toast.error(err instanceof Error ? err.message : "Run failed");
+      toast.error(err instanceof Error ? err.message : "Could not create draft");
     } finally {
       setPending(false);
     }

package/src/components/apps/run-now-toast.ts

@@ -0,0 +1,27 @@
+import { toast } from "sonner";
+
+/**
+ * BUG-4: "Run now" POSTs the blueprint instantiate endpoint, which creates a
+ * `draft` workflow and does NOT dispatch it. The old toast said "Run started",
+ * which is a lie — nothing runs until the user hits Execute on the workflow
+ * detail page. Surface the truth: a draft was created, and deep-link to where
+ * it can be executed.
+ *
+ * Shared by `run-now-button.tsx` (direct POST) and `run-now-sheet.tsx`
+ * (variable path) so the honest copy can't drift between the two.
+ */
+export function toastDraftCreated(workflowId: string | undefined): void {
+  if (!workflowId) {
+    // No id to link to — still don't claim it started.
+    toast.success("Draft created. Open it in Workflows to Execute.");
+    return;
+  }
+  toast.success("Draft created. Open it in Workflows to Execute.", {
+    action: {
+      label: "Open workflow",
+      onClick: () => {
+        window.location.assign(`/workflows/${workflowId}`);
+      },
+    },
+  });
+}

package/src/components/settings/data-management-section.tsx

@@ -15,7 +15,35 @@ import { ConfirmDialog } from "@/components/shared/confirm-dialog";
 import { toast } from "sonner";
 import { Loader2, Trash2, Database } from "lucide-react";
 
-export function DataManagementSection() {
+/**
+ * Reads a JSON body defensively. A gated route returns an explanatory
+ * `{success:false,error}` body with a non-2xx status; a genuine network/parse
+ * failure has no parseable body. Distinguishing the two is what stops a
+ * deliberate gate (403) from being disguised as "Network error" (BUG-5).
+ */
+async function readResult(
+  res: Response
+): Promise<{ ok: boolean; body: Record<string, unknown> | null }> {
+  let body: Record<string, unknown> | null = null;
+  try {
+    body = (await res.json()) as Record<string, unknown> | null;
+  } catch {
+    body = null;
+  }
+  return { ok: res.ok, body };
+}
+
+/** Prefer the route's explanatory reason; fall back to the HTTP status. */
+function failureMessage(
+  res: Response,
+  body: Record<string, unknown> | null,
+  fallback: string
+): string {
+  if (body && typeof body.error === "string") return body.error;
+  return `${fallback} (HTTP ${res.status})`;
+}
+
+export function DataManagementSection({ allowed = true }: { allowed?: boolean }) {
   const [clearOpen, setClearOpen] = useState(false);
   const [seedOpen, setSeedOpen] = useState(false);
   const [loading, setLoading] = useState(false);
@@ -24,14 +52,14 @@ export function DataManagementSection() {
     setLoading(true);
     try {
       const res = await fetch("/api/data/clear", { method: "POST" });
-      const data = await res.json();
-      if (data.success) {
-        const d = data.deleted;
+      const { ok, body } = await readResult(res);
+      if (ok && body?.success) {
+        const d = body.deleted as Record<string, number>;
         toast.success(
           `Cleared ${d.projects} projects, ${d.tasks} tasks, ${d.workflows} workflows, ${d.schedules} schedules, ${d.documents} documents, ${d.conversations} conversations, ${d.chatMessages} messages, ${d.learnedContext} learned context, ${d.views} views, ${d.usageLedger} usage entries, ${d.agentLogs} logs, ${d.notifications} notifications, ${d.sampleProfiles} sample profiles, ${d.files} files`
         );
       } else {
-        toast.error(`Clear failed: ${data.error}`);
+        toast.error(failureMessage(res, body, "Clear failed"));
       }
     } catch {
       toast.error("Clear failed. Network error");
@@ -44,14 +72,14 @@ export function DataManagementSection() {
     setLoading(true);
     try {
       const res = await fetch("/api/data/seed", { method: "POST" });
-      const data = await res.json();
-      if (data.success) {
-        const s = data.seeded;
+      const { ok, body } = await readResult(res);
+      if (ok && body?.success) {
+        const s = body.seeded as Record<string, number>;
         toast.success(
           `Seeded ${s.profiles} profiles, ${s.projects} projects, ${s.tasks} tasks, ${s.workflows} workflows, ${s.schedules} schedules, ${s.documents} documents, ${s.userTables} tables (${s.userTableRows} rows, ${s.tableViews} views, ${s.tableTriggers} triggers, ${s.tableRelationships} links), ${s.conversations} conversations, ${s.chatMessages} messages, ${s.agentMemory} memories, ${s.agentMessages} handoffs, ${s.channelConfigs} channels (${s.channelBindings} bindings), ${s.environmentScans} scans (${s.environmentArtifacts} artifacts, ${s.environmentCheckpoints} checkpoints, ${s.environmentTemplates} templates), ${s.workflowExecutionStats} workflow-stats, ${s.scheduleFiringMetrics} firing-metrics, ${s.usageLedger} usage entries, ${s.learnedContext} learned context, ${s.views} views, ${s.profileTestResults} test results, ${s.repoImports} repo imports, ${s.agentLogs} logs, ${s.notifications} notifications`
         );
       } else {
-        toast.error(`Seed failed: ${data.error}`);
+        toast.error(failureMessage(res, body, "Seed failed"));
       }
     } catch {
       toast.error("Seed failed. Network error");
@@ -60,6 +88,25 @@ export function DataManagementSection() {
     }
   }
 
+  if (!allowed) {
+    return (
+      <Card className="surface-card">
+        <CardHeader>
+          <CardTitle>Data Management</CardTitle>
+          <CardDescription>
+            Reset or populate your Orionfold Relay instance
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          <p className="text-sm text-muted-foreground">
+            Seeding and clearing sample data are staging-only tools. They are
+            turned off on this build so your real data stays safe.
+          </p>
+        </CardContent>
+      </Card>
+    );
+  }
+
   return (
     <>
       <Card className="surface-card">

package/src/lib/apps/view-kits/data.ts

@@ -162,6 +162,7 @@ async function loadRuntimeStateUncached(
 
 async function loadBaseline(app: AppDetail): Promise<RuntimeState> {
   let recentTaskCount: number | undefined;
+  let activeRunCount = 0;
   try {
     const rows = db
       .select({ value: count() })
@@ -169,12 +170,22 @@ async function loadBaseline(app: AppDetail): Promise<RuntimeState> {
       .where(eq(tasks.projectId, app.id))
       .all();
     recentTaskCount = rows[0]?.value ?? 0;
+    // BUG-2: the header status must reflect whether the app is ACTUALLY
+    // running something, not a hardcoded literal. Count in-flight tasks
+    // (status = "running") for this app so kits can render Ready vs Running.
+    const running = db
+      .select({ value: count() })
+      .from(tasks)
+      .where(and(eq(tasks.projectId, app.id), eq(tasks.status, "running")))
+      .all();
+    activeRunCount = running[0]?.value ?? 0;
   } catch {
     recentTaskCount = undefined;
+    activeRunCount = 0;
   }
   const firstCron = app.manifest.schedules[0]?.cron;
   const scheduleCadence = firstCron ? humanizeCron(firstCron) : null;
-  return { app, recentTaskCount, scheduleCadence };
+  return { app, recentTaskCount, scheduleCadence, activeRunCount };
 }
 
 async function loadCadence(

package/src/lib/apps/view-kits/header-status.ts

@@ -0,0 +1,14 @@
+import type { HeaderSlot, RuntimeState } from "./types";
+
+/**
+ * BUG-2: derive the app header's status chip from real run state instead of a
+ * hardcoded `"running"` literal. An app pulses "Running" ONLY while a task is
+ * actually in flight; otherwise it reads a calm, non-pulsing "Ready".
+ *
+ * All 7 view-kit builders share this so the fake-green-pulse-on-idle defect
+ * can't reappear in one kit. `activeRunCount` is populated once in the data
+ * layer's `loadBaseline` and spread into every kit's RuntimeState.
+ */
+export function headerStatus(runtime: RuntimeState): HeaderSlot["status"] {
+  return (runtime.activeRunCount ?? 0) > 0 ? "running" : "ready";
+}

package/src/lib/apps/view-kits/kits/coach.ts

@@ -9,6 +9,7 @@ import type {
   RuntimeState,
   ViewModel,
 } from "../types";
+import { headerStatus } from "../header-status";
 import type { BlueprintVariable } from "@/lib/workflows/blueprints/types";
 
 interface CoachProjection extends KitProjection {
@@ -82,7 +83,7 @@ export const coachKit: KitDefinition = {
       header: {
         title: app.name,
         description: app.description ?? undefined,
-        status: "running",
+        status: headerStatus(runtime),
         cadenceChip: runtime.cadence ?? undefined,
         runNowBlueprintId: projection.runsBlueprintId,
         runNowVariables: projection.runsBlueprintVars,

package/src/lib/apps/view-kits/kits/inbox.ts

@@ -12,6 +12,7 @@ import type {
   TriggerSource,
   ViewModel,
 } from "../types";
+import { headerStatus } from "../header-status";
 import type { BlueprintVariable } from "@/lib/workflows/blueprints/types";
 
 interface InboxProjection extends KitProjection {
@@ -113,7 +114,7 @@ export const inboxKit: KitDefinition = {
       header: {
         title: app.name,
         description: app.description ?? undefined,
-        status: "running",
+        status: headerStatus(runtime),
         runNowBlueprintId: isRowInsert ? undefined : projection.draftBlueprintId,
         runNowVariables: projection.draftBlueprintVars,
         triggerSourceChip: projection.triggerSource,

package/src/lib/apps/view-kits/kits/ledger.ts

@@ -13,6 +13,7 @@ import type {
   RuntimeState,
   ViewModel,
 } from "../types";
+import { headerStatus } from "../header-status";
 import type { BlueprintVariable } from "@/lib/workflows/blueprints/types";
 
 type KpiSpec = NonNullable<ViewConfig["bindings"]["kpis"]>[number];
@@ -134,7 +135,7 @@ export const ledgerKit: KitDefinition = {
       header: {
         title: app.name,
         description: app.description ?? undefined,
-        status: "running",
+        status: headerStatus(runtime),
         runNowBlueprintId: projection.runsBlueprintId,
         runNowVariables: projection.runsBlueprintVars,
         periodChip: { current: projection.period },

package/src/lib/apps/view-kits/kits/placeholder.ts

@@ -8,6 +8,7 @@ import type {
   RuntimeState,
   ViewModel,
 } from "../types";
+import { headerStatus } from "../header-status";
 
 /**
  * Phase 1.1 placeholder kit. Lands the seam: every app dispatches through
@@ -41,7 +42,7 @@ export const placeholderKit: KitDefinition = {
       header: {
         title: app.name,
         description: app.description ?? "Composed app",
-        status: "running",
+        status: headerStatus(runtime),
       },
       footer: {
         appId: app.id,

package/src/lib/apps/view-kits/kits/research.ts

@@ -11,6 +11,7 @@ import type {
   RuntimeState,
   ViewModel,
 } from "../types";
+import { headerStatus } from "../header-status";
 import type { BlueprintVariable } from "@/lib/workflows/blueprints/types";
 
 interface ResearchProjection extends KitProjection {
@@ -106,7 +107,7 @@ export const researchKit: KitDefinition = {
       header: {
         title: app.name,
         description: app.description ?? undefined,
-        status: "running",
+        status: headerStatus(runtime),
         cadenceChip: runtime.cadence ?? undefined,
         runNowBlueprintId: projection.synthesisBlueprintId,
         runNowVariables: projection.synthesisBlueprintVars,

package/src/lib/apps/view-kits/kits/tracker.ts

@@ -11,6 +11,7 @@ import type {
   RuntimeState,
   ViewModel,
 } from "../types";
+import { headerStatus } from "../header-status";
 
 type KpiSpec = NonNullable<ViewConfig["bindings"]["kpis"]>[number];
 
@@ -103,7 +104,7 @@ export const trackerKit: KitDefinition = {
       header: {
         title: app.name,
         description: app.description ?? undefined,
-        status: "running",
+        status: headerStatus(runtime),
         cadenceChip: runtime.cadence ?? undefined,
         runNowBlueprintId: projection.runsBlueprintId,
       },

package/src/lib/apps/view-kits/kits/workflow-hub.ts

@@ -11,6 +11,7 @@ import type {
   RuntimeState,
   ViewModel,
 } from "../types";
+import { headerStatus } from "../header-status";
 
 type KpiSpec = NonNullable<ViewConfig["bindings"]["kpis"]>[number];
 
@@ -120,7 +121,7 @@ export const workflowHubKit: KitDefinition = {
       header: {
         title: app.name,
         description: app.description ?? "Composed app",
-        status: "running",
+        status: headerStatus(runtime),
         cadenceChip: runtime.cadence ?? undefined,
       },
       kpis: runtime.evaluatedKpis ?? [],

package/src/lib/apps/view-kits/types.ts

@@ -65,6 +65,12 @@ export interface TimelineRun {
 export interface RuntimeState {
   app: AppDetail;
   recentTaskCount?: number;
+  /**
+   * BUG-2: number of tasks currently in flight (status = "running") for this
+   * app. Drives the header status chip — Ready (idle) vs Running — so an idle
+   * app never pulses a fake "Running" literal.
+   */
+  activeRunCount?: number;
   scheduleCadence?: string | null;
   /** Phase 2: hero table content for Tracker kit (columns + last-N rows). */
   heroTable?: HeroTableData | null;
@@ -176,7 +182,7 @@ export type TriggerSource =
 export interface HeaderSlot {
   title: string;
   description?: string;
-  status?: "running" | "queued" | "completed" | "failed" | "planned";
+  status?: "ready" | "running" | "queued" | "completed" | "failed" | "planned";
   /** Right-aligned actions; rendered as ReactNode so kits can compose. */
   actions?: ReactNode;
   /** Phase 2: render a ScheduleCadenceChip when present. */

package/src/lib/chat/files/search.ts

@@ -41,6 +41,11 @@ export function searchFiles(
         encoding: "utf-8",
         maxBuffer: 10 * 1024 * 1024,
         timeout: 3000,
+        // Route git's stderr to a pipe (discarded via the catch) instead of
+        // inheriting the console, so a non-git cwd can't leak a raw
+        // `fatal: not a git repository` line to a customer's console. Mirrors
+        // src/lib/environment/workspace-context.ts / src/lib/instance/git-ops.ts.
+        stdio: ["ignore", "pipe", "pipe"],
       }
     );
   } catch {

package/src/lib/constants/status-families.ts

@@ -41,12 +41,24 @@ export interface StatusDefinition {
   live?: boolean;
 }
 
+// Neutral, non-pulsing surface token (used by planned/ready idle states).
+const MUTED = "muted-foreground";
+
 // ── Lifecycle statuses ───────────────────────────────────────────
 export const lifecycleStatuses: Record<string, StatusDefinition> = {
   planned: {
     label: "Planned",
     icon: Circle,
-    colorToken: "muted-foreground",
+    colorToken: MUTED,
+    badgeVariant: "outline",
+  },
+  // BUG-2: installed & healthy with nothing in flight. Calm, NON-pulsing —
+  // an idle app must not show the green "Running" ping. Neutral (muted) reads
+  // as "steady/ready", not a success/completion state.
+  ready: {
+    label: "Ready",
+    icon: CheckCircle2,
+    colorToken: MUTED,
     badgeVariant: "outline",
   },
   queued: {

package/src/lib/environment/git-manager.ts

@@ -19,6 +19,11 @@ function git(args: string[], cwd: string): GitResult {
       cwd,
       encoding: "utf-8",
       timeout: 10000,
+      // Route git's stderr to a pipe (discarded here) instead of inheriting
+      // the console, so a non-git cwd can't leak a raw `fatal: not a git
+      // repository` line to a customer's first-run log. Mirrors
+      // src/lib/environment/workspace-context.ts / src/lib/instance/git-ops.ts.
+      stdio: ["ignore", "pipe", "pipe"],
     }).trim();
     return { success: true, output };
   } catch (e) {

package/src/lib/packs/install.ts

@@ -361,6 +361,25 @@ export async function installPack(
       reloadBlueprints();
     }
 
+    // Defense-in-depth for the app-detail Data Cache. `loadRuntimeState`
+    // (src/lib/apps/view-kits/data.ts) wraps its projection in
+    // unstable_cache({ revalidate:30, tags:['app-runtime:<id>'] }). Reloading
+    // the registry above fixes getBlueprint(), but a Data-Cache snapshot taken
+    // in the 30s window before enrichment populated could still serve husk
+    // cards (raw ids, no Run button). Invalidating the tag here guarantees the
+    // freshly-installed app's page reads a live projection, not a stale one.
+    // (Did not reproduce on a from-scratch install — the registry singleton is
+    // populated before first render — but this closes the latent race.)
+    try {
+      const { revalidateTag } = await import("next/cache");
+      // Next 16 requires a profile/expiry arg. expire:0 = purge the tagged
+      // entry immediately so the next render recomputes the projection.
+      revalidateTag(`app-runtime:${pack.meta.id}`, { expire: 0 });
+    } catch {
+      // revalidateTag is a no-op outside a Next request/render scope (e.g. the
+      // CLI install path). Never let cache housekeeping fail an install.
+    }
+
     // 6. Report — zero silent steps.
     return {
       packId: pack.meta.id,

package/src/lib/plugins/examples/echo-server/plugin.yaml

@@ -1,6 +1,6 @@
 id: echo-server
 version: 0.1.0
-apiVersion: "0.25"
+apiVersion: "0.26"
 kind: chat-tools
 name: Echo Server
 description: |

package/src/lib/plugins/examples/finance-pack/plugin.yaml

@@ -1,6 +1,6 @@
 id: finance-pack
 version: 0.1.0
-apiVersion: "0.25"
+apiVersion: "0.26"
 kind: primitives-bundle
 name: Finance Pack
 description: |

package/src/lib/plugins/examples/reading-radar/plugin.yaml

@@ -1,6 +1,6 @@
 id: reading-radar
 version: 0.1.0
-apiVersion: "0.25"
+apiVersion: "0.26"
 kind: primitives-bundle
 name: Reading Radar
 description: |

package/src/lib/plugins/registry.ts

@@ -53,7 +53,7 @@ import type { ScheduleSpec } from "@/lib/validators/schedule-spec";
 // unfixed from 0.15.0 through 0.16.0 — treat the window test's failure as
 // a release blocker, not noise). The 0.13→0.14 three-MINOR bridge is over;
 // this is the standard 2-MINOR window now.
-const SUPPORTED_API_VERSIONS = new Set([CURRENT_PLUGIN_API_VERSION, "0.24"]);
+const SUPPORTED_API_VERSIONS = new Set([CURRENT_PLUGIN_API_VERSION, "0.25"]);
 
 /** Test-helper export so the window-enforcement test can read state. */
 export function isSupportedApiVersion(apiVersion: string): boolean {

package/src/lib/plugins/sdk/types.ts

@@ -6,7 +6,7 @@ import { z } from "zod";
 // (a hardcoded copy there once drifted to "0.14" — scaffolded plugins would
 // have been disabled on load the moment the window tightened). Bump on every
 // MINOR release; api-version-window.test.ts fails if this goes stale.
-export const CURRENT_PLUGIN_API_VERSION = "0.25";
+export const CURRENT_PLUGIN_API_VERSION = "0.26";
 
 // Shared capability tuple — single source of truth used by Zod schema and
 // capability-check.ts hash derivation. Exported so consumers don't need a